Hack history / 2021 / Hack or exploit
Furucombo
Hack or exploit on Feb 27, 2021 · Delegatecall Hijack
SOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$14M
sources: $14M to $15M
Returned
none listed
as the sources state it
Rank
#246
among thefts by dollars lost
What happened
Furucombo exploited February 27, 2021 for ~$14M via delegatecall hijack. Attacker deployed a fraudulent contract impersonating Aave v2 implementation. Furucombo failed to authenticate the target, allowing the attacker to drain pre-approved tokens (3,900+ stETH and USDC) from ~22 users.
Details
- Date
- Feb 27, 2021
- Kind
- Hack or exploit
- Method
- Delegatecall Hijack
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
- Audit (rekt.news)
- unaudited
Reported by
Related incidents
Cite this page
SwanBluechip, "Furucombo hack, Feb 27, 2021: $14M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht9a14dc6dac/ (data as of 2026-10-31).